CIS Benchmarks April 2026 Update
![]()
The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below. Each Benchmark and Build Kit includes a full changelog that references all changes.
CIS Benchmarks Updated Last Month
- CIS Microsoft 365 Foundations Benchmark v6.0.1
- CIS Apache Tomcat 9 Benchmark v1.2.1
- CIS Microsoft Windows Server 2022 Stand-alone Benchmark v2.0.0
- CIS Cisco IOS XE Router NDM STIG Benchmark v1.1.0
- CIS Cisco IOS XE Switch NDM STIG Benchmark v1.1.0
- CIS Microsoft Windows 11 Standalone Benchmark v5.0.0
- CIS Microsoft Windows 11 STIG Benchmark v1.1.0
- CIS Microsoft Windows 11 Enterprise Benchmark v5.0.1
- CIS Amazon Web Services Foundations Benchmark v7.0.0
CIS Microsoft 365 Foundations Benchmark v6.0.1
We are excited to announce the CIS Microsoft 365 Foundations Benchmark v6.0.1 has been published. Here's a quick overview of the key improvements we've made in this update:
- Version Microsoft 365 Foundations 6.0.1 and forward now includes newly built Automated Assessment Content, integrating with CIS-CAT Pro Assessor v4.60.0
- Added a single automation script for section 9.1, Microsoft Fabric
- All Fabric setting in section 9.1 now have automated procedures
- Minor fixes to spelling and grammar
Download the CIS Microsoft 365 Foundations Benchmark v6.0.1 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Apache Tomcat 9 Benchmark v1.2.1
A maintenance release of CIS Apache Tomcat 9 Benchmark v1.2.1 was issued to address an issue with CIS-CAT and CIS SecureSuite Platform.Visit
Download the CIS Apache Tomcat 9 Benchmark v1.2.1 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Microsoft Windows Server 2022 Stand-alone Benchmark v2.0.0
We are excited to announce the publication of the updated CIS Microsoft Windows Server 2022 Stand-alone Benchmark v2.0.0. Our team has devoted significant time and effort to enhance the content of this Benchmark, ensuring it remains relevant and valuable to members.
Here's a quick overview of the key improvements we've made in this update:
- Added 3 new security settings
- Updated 16 settings
- Removed 17 settings
- Renamed 1 setting
- Moved, added, and removed sections due to updated ADMX templates.
A change log detailing the modifications made is included in the Word Doc and PDF versions of the Benchmark.
A huge thank you to the CIS Windows Community and Windows team for making this Benchmark happen. Special thanks to Haemish Edgerton and Aaron Margosis.
Download the CIS Microsoft Windows Server 2022 Stand-alone Benchmark v2.0.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Cisco IOS XE Router NDM STIG Benchmark v1.1.0
We are pleased to announce the release of CIS Cisco IOS XE Router NDM STIG Benchmark v1.1.0.
Download the CIS Cisco IOS XE Router NDM STIG Benchmark v1.1.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Cisco IOS XE Switch NDM STIG Benchmark v1.1.0
We are pleased to announce the release of CIS Cisco IOS XE Switch NDM STIG Benchmark v1.1.0. We added CIS-CAT ability with 19 recommendations.
Download the CIS Cisco IOS XE Switch NDM STIG Benchmark v1.1.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Microsoft Windows 11 Stand-alone Benchmark v5.0.0
We are excited to announce the publication of the updated CIS Microsoft Windows 11 Stand-alone Benchmark v5.0.0. Our team has devoted significant time and effort to enhance the content of this Benchmark, ensuring it remains relevant and valuable to members.
Here's a quick overview of the key improvements we've made in this update:
- Added 12 new security settings
- Updated 22 settings
- Removed 19 settings
- Renamed 1 setting
- Moved, added, and removed sections due to updated ADMX templates
A change log detailing the modifications made is included in the Word Doc and PDF versions of the Benchmark.
A huge thank you to the CIS Windows Community and Windows team for making this Benchmark happen. Special thanks to Haemish Edgerton and Aaron Margosis.
Download the CIS Microsoft Windows 11 Stand-alone Benchmark v5.0.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Microsoft Windows 11 STIG Benchmark v1.1.0
We are pleased to announce the release of the CIS Microsoft Windows 11 STIG Benchmark v1.1.0.
This release includes Automated Assessment Content and Build Kit coverage for the Microsoft Windows 11 Secure Technical Implementation Guide (STIG) Version: 2 Release: 6
Download the CIS Microsoft Windows 11 STIG Benchmark v1.1.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Microsoft Windows 11 Enterprise Benchmark v5.0.1
We are excited to announce the publication of the CIS Microsoft Windows 11 Enterprise Benchmark v5.0.1.
This bugfix addresses an issue with CIS-CAT and the CIS SecureSuite Platform.
Download the CIS Microsoft Windows 11 Enterprise Benchmark v5.0.1 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Amazon Web Services Foundations Benchmark v7.0.0
We’re pleased to share the release of the CIS Amazon Web Services Foundations Benchmark v7.0.0. This latest version reflects extensive updates and improvements made by our team to ensure the Benchmark continues to provide relevant and actionable security guidance for AWS environments.
Highlights from this release include:
- Introduction of new security recommendations
- Updates to existing security settings
- Structural adjustments to sections to reflect changes in AWS services and guidance
- Removal of outdated settings
- Renaming certain settings for improved clarity
- Relocation of settings within the Benchmark
Special thanks to Anunay Bhatt and Sarah Knickerbocker.
Download the CIS Amazon Web Services Foundations Benchmark v7.0.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
New CIS Benchmark Released Last Month
- CIS Tencent Cloud Enterprise Foundations Benchmark v1.0.0
- CIS SUSE Linux Enterprise Benchmark 16 v1.0.0
- CIS Sophos Firewall v22.x Benchmark v1.0.0
CIS Tencent Cloud Enterprise Foundations Benchmark v1.0.0
We are excited to announce the release of the new CIS Tencent Cloud Enterprise Foundations Benchmark v1.0.0. A lot of time and effort has gone into the creation of this new Benchmark. This security configuration Benchmark covers the fundamental elements of Tencent Cloud Enterprise (TCE) and provides guidance on security option configurations for certain TCE services, focusing on fundamental, testable, and architecture-agnostic settings.
A huge thank you to the team from Tencent for the time they put in creating this Benchmark! Special thank to Li Lili, Qi Zhao, Woon Ming Thien, Xiaoyan Zhai, Zhao Zhao, and Zhiyuan Peng.
Download the CIS Tencent Cloud Enterprise Foundations Benchmark v1.0.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS SUSE Linux Enterprise 16 Benchmark v1.0.0
We are excited to announce the publication of the new technology version CIS SUSE Linux Enterprise 16 Benchmark v1.0.0.
A huge thank you to the CIS team NIX for making this Benchmark happen!
Download the CIS SUSE Linux Enterprise 16 Benchmark v1.0.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
CIS Sophos Firewall v22.x Benchmark v1.0.0
We are pleased to announce the release of the CIS Sophos Firewall v22.x Benchmark v1.0.0.
Download the CIS Sophos Firewall v22.x Benchmark v1.0.0 in PDF.
CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.
New CIS Build Kit Released Last Month
- CIS Microsoft Windows Server 2022 Stand-alone Benchmark v2.0.0
- CIS Microsoft Windows 11 Standalone Benchmark v5.0.0
- CIS Microsoft Windows 11 STIG Benchmark v1.1.0
- CIS Microsoft Windows 11 Enterprise Benchmark v5.0.1

Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today!
If you're interested, please reach out to us at [email protected]. You can also learn more on the CIS Benchmarks Community page.
Wind River is collaborating with CIS to develop a CIS Wind River eLxr 12 Benchmark. A DRAFT version is currently available on CIS WorkBench for review and comment.
- DRAFT Benchmark: https://workbench.cisecurity.org/benchmarks/20820
- DRAFT pdf: https://workbench.cisecurity.org/files/5850
As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.